hush

Переносимая открытая спецификация для правил безопасности AI-агентов Спецификация · Документация · Наборы правил · JSON Schema HushSpec — это открытый формат политик для правил безопасности AI-агентов. Он определяет, что агент может делать во время выполнения, включая доступ к файловой системе,...

CVE-2025-32463

🚨 PoC: CVE-2025-32463 – Vulnerabilità di Escape da chroot in Sudo Una vulnerabilità critica che interessa le versioni di sudo da 1.9.0 a 1.9.17p1 , consentendo agli utenti di evadere da chroot e ottenere accesso al filesystem root reale. 📌 Descrizione CVE-2025-32463 è una vulnerabilità di...

CVE-2024-21626

CVE-2024-21626 الاستغلال دليل العمل docker run -w /proc/self/fd/8 --name cve-2024-21626 --rm -it debian:bookworm المهم وضع -w /proc/self/fd/8\ الوصول إلى نظام ملفات المضيف باستخدام cat ../../../../../../../../../etc/passwd داخل الحاوية الاستغلال الرابط الرمزي 1. docker run --name cve-2024-21626...

CVE-2020-11651-poc

PoC-Exploit für CVE-2020-11651 und CVE-2020-11652 Dies ist ein Proof-of-Concept-Exploit basierend auf dem ursprünglichen Check-Skript. Verwenden Sie es, um zu überprüfen, ob Sie Ihre Salt-Master-Server erfolgreich auf eine Version mit den erforderlichen Korrekturen aktualisiert haben. Dank an...

cve-2025-9074-poc

CVE-2025-9074 PoC educativo · codice di prova di concetto Questo repository contiene un PoC educativo che dimostra il rischio di sfruttare l'API remota non autenticata di Docker Engine per creare un contenitore privilegiato in grado di leggere e scrivere sul filesystem host. Il file eseguibile è...

Mlflow < 2.11.0 - Path Traversal

A path traversal vulnerability exists in mlflow/mlflow version 2.11.0, identified as a bypass for the previously addressed CVE-2023-6909. The vulnerability arises from the application's handling of artifact URLs, where a '' character can be used to insert a path into the fragment, effectively...

cve-2021-41773-exploration

Panoramica CVE-2021-41773 è una vulnerabilità di path traversal scoperta in Apache HTTP Server 2.4.49 nell'ottobre 2021. La causa principale è stata un errore nella normalizzazione delle sequenze di punti finali nell'URL prima di verificare che il percorso richiesto rimanesse all'interno della ro...

EUVD-2026-39477

Trivy has a path traversal via a crafted vulnerability database or other downloaded artifacts...

cve-2024-21626

CVE-2024-21626 Panoramica Questo repository contiene esempi di codice per un'app vulnerabile a CVE-2024-21626 e un gadget eBPF per rilevare i tentativi di sfruttamento. Questo repository è stato creato come parte di questo post del blog. Il programma gadget usato per rilevare questa vulnerabilità...

CVE-2020-11651-PoC

CVE-2020-11651-PoC Repository che contiene un exploit CVE-2020-11651 aggiornato per funzionare con le ultime versioni di Python e gestire gli errori relativi alle connessioni. COPIA DEL README DAL REPOSITORY ORIGINALE Repository Originale Exploit PoC per CVE-2020-11651 e CVE-2020-11652 Questo è u...

CVE-2026-78122-POC

CVE-2026-78122 — प्रूफ ऑफ कॉन्सेप्ट Tecnativadocker-socket-proxy ≤ 0.5.0 — अपर्याप्त एक्सेस-नियंत्रण ग्रैन्युलैरिटी CWE-1220 CVSS 4.0: 8.3 उच्च — CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N हमला वेक्टर एडजेसेंट आसन्न है AV:A: हमलावर को प्रॉक्सी तक लोकल/आसन्न नेटवर्क पहुँच की...

CVE-2026-62677 Omnigent: Unvalidated os_env.cwd in agent bundle yields arbitrary host filesystem access on runners without OMNIGENT_RUNNER_WORKSPACE

Omnigent is an open-source AI agent framework and meta-harness for orchestrating coding agents. Prior to 0.3.0, an authenticated user can upload a session-scoped agent bundle with an absolute or traversal-containing osenv.cwd value because omnigent/spec/parser.py stores the value verbatim and...

CVE-2026-77751

A path traversal vulnerability existed in the handling of MISP object template names during STIX 2 import and MISP-to-STIX 2 export. MISP object names are passed to PyMISP's object-template resolution mechanism, which constructs a filesystem path by joining the configured MISP object-template...

CVE-2026-58564

Dell Command Update DCU, versions prior to 5.7.1, contain an Incorrect Default Permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Filesystem access for attacker...

CVE-2026-16686

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to access NFS-exported filesystems due to improper authentication...

EUVD-2026-62529

Dell Command Update DCU, versions prior to 5.7.1, contain an Incorrect Default Permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Filesystem access for attacker...

CVE-2026-58564

Dell Command Update DCU, versions prior to 5.7.1, contain an Incorrect Default Permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Filesystem access for attacker...

CVE-2026-58564

Dell Command Update (DCU) versions prior to 5.7.1 ship with overly permissive default file permissions. A low-privileged local attacker can leverage this to access the filesystem, achieving high confidentiality, integrity, and availability impact (CVSS 7.8). Remediation is to upgrade DCU to versi...

EUVD-2026-62517

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to access NFS-exported filesystems due to improper authentication...

PT-2026-78459

Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description Improper authentication allows a remote attacker to gain unauthorized access to NFS-exported filesystems. NFS Network File System is a distributed file system protocol that...